View previous topic :: View next topic |
Author |
Topic : "ILOVEYOU" |
Oscar Alexander member
Member # Joined: 21 Dec 1999 Posts: 295 Location: Amersfoort, the Netherlands
|
Posted: Thu May 04, 2000 5:39 am |
|
|
Please watch out for this new virus called "ILOVEYOU". It's currently being spread through email worldwide and it's a pretty aggressive lil' bitch.
The virus duplicates itself into all mp3 and jpg files (and more) currently stored on your local harddrive and gives them a .vsb extension. After that, it sends a copy of itself to everyone in your addressbook.
For the sake of your artwork: keep an eye out. Be sure to check your favorite news site for fixes.
Oscar
[This message has been edited by Oscar Alexander (edited May 04, 2000).] |
|
Back to top |
|
Affected member
Member # Joined: 22 Oct 1999 Posts: 1854 Location: Helsinki, Finland
|
Posted: Thu May 04, 2000 5:48 am |
|
|
This is probably another OE-only virus? |
|
Back to top |
|
B member
Member # Joined: 12 Jan 2000 Posts: 322 Location: Houston, Tx, USA
|
Posted: Thu May 04, 2000 6:03 am |
|
|
i've received over 100 calls about this this morning..
sometimes being a tech sucks,. |
|
Back to top |
|
synj member
Member # Joined: 02 Apr 2000 Posts: 1483 Location: San Diego
|
Posted: Thu May 04, 2000 6:14 am |
|
|
And just how can this virus affect me if i dont feel like running an exe that I don't know anything about?
-synj www.synj.net
Ridiculously good stuff. |
|
Back to top |
|
B member
Member # Joined: 12 Jan 2000 Posts: 322 Location: Houston, Tx, USA
|
Posted: Thu May 04, 2000 6:25 am |
|
|
it is not an exe file,. it's a VBS <visual basic script>
and it just shut down our servers,. |
|
Back to top |
|
Oscar Alexander member
Member # Joined: 21 Dec 1999 Posts: 295 Location: Amersfoort, the Netherlands
|
Posted: Thu May 04, 2000 6:26 am |
|
|
Synj, haven't you heard about the virus-gnomes that execute malicious scripts on your system while you're asleep? They're small, they stink and they usually strike around 4am. |
|
Back to top |
|
synj member
Member # Joined: 02 Apr 2000 Posts: 1483 Location: San Diego
|
Posted: Thu May 04, 2000 6:32 am |
|
|
Well, at least I'll be up to catch them then.
|
|
Back to top |
|
Affected member
Member # Joined: 22 Oct 1999 Posts: 1854 Location: Helsinki, Finland
|
Posted: Thu May 04, 2000 6:35 am |
|
|
Oh well, I use hotmail, I guess I'm safe. |
|
Back to top |
|
B member
Member # Joined: 12 Jan 2000 Posts: 322 Location: Houston, Tx, USA
|
Posted: Thu May 04, 2000 6:38 am |
|
|
not if you're in someone's address book,. this problem is mainly a "corporate" problem because we have a global address book,. worldwide we're getting calls, because morons think that someone actually loves them.. heh |
|
Back to top |
|
B member
Member # Joined: 12 Jan 2000 Posts: 322 Location: Houston, Tx, USA
|
Posted: Thu May 04, 2000 6:46 am |
|
|
for those who haven't seen the script. i've converted it to text, so it won't affect you UNLESS you convert it to a VBS
http://members.dencity.com/_B_/LOVE-LETTER-FOR-YOU.TXT
i made a few changes to the script, so it wouldn't work,. for those malicious people out there,.. ~
[This message has been edited by B (edited May 04, 2000).] |
|
Back to top |
|
Oscar Alexander member
Member # Joined: 21 Dec 1999 Posts: 295 Location: Amersfoort, the Netherlands
|
Posted: Thu May 04, 2000 6:50 am |
|
|
I checked it out as soon as I got it. It's pretty neat script, never knew VBS what THAT powerful... |
|
Back to top |
|
ilmi junior member
Member # Joined: 26 Oct 1999 Posts: 43 Location: Shah Alam
|
Posted: Thu May 04, 2000 6:50 am |
|
|
so.. what should i do if i found it? just delete it?
------------------
Hyper-D Studio |
|
Back to top |
|
Affected member
Member # Joined: 22 Oct 1999 Posts: 1854 Location: Helsinki, Finland
|
Posted: Thu May 04, 2000 6:53 am |
|
|
Well, apparently it still requires the attachment to be opened. |
|
Back to top |
|
assa member
Member # Joined: 02 Feb 2000 Posts: 96 Location: Amsterdam Holland
|
Posted: Thu May 04, 2000 7:04 am |
|
|
Using micro$oft related crap like outlook,
the winslow adress book (wab) & MS wallet is
ASKING for trouble hehe..
Macros, big ugly html/javascript mail &
complete word or 'power'point documents do
not fitt my idea for a small and flexible
email solution. I'll stick to ascii and keep
my non MS firewall running (200k for saying "how are you" in all sorts of funky colors
and animation is a bit much imho)
This shows how easy the 'net' can be jammed
because of some dorky company with a tutti
frutti email client and a bucket of flaws.
assa
[This message has been edited by assa (edited May 04, 2000).] |
|
Back to top |
|
Oscar Alexander member
Member # Joined: 21 Dec 1999 Posts: 295 Location: Amersfoort, the Netherlands
|
Posted: Thu May 04, 2000 7:14 am |
|
|
The email client is not to blame (it's merely used for spreading it). It's Windows' VBScript support that's messed up. |
|
Back to top |
|
B member
Member # Joined: 12 Jan 2000 Posts: 322 Location: Houston, Tx, USA
|
|
Back to top |
|
zapman member
Member # Joined: 26 Feb 2000 Posts: 354 Location: USA
|
Posted: Thu May 04, 2000 9:22 am |
|
|
I made it so it will Delet the file befor it gets on my computer, it will delte a File that has anything to do with the words "iloveyou" I set it as a Rule for in INDOX outlook.
You all shold do this if you think you will get the e-mail..
Takeing no changes =)
------------------
ZAPmAn
Digitize Design
art, fart, and be smart. |
|
Back to top |
|
Tinusch member
Member # Joined: 25 Dec 1999 Posts: 2757 Location: Rhode Island, USA
|
Posted: Thu May 04, 2000 10:36 am |
|
|
Wow, I've been online for like 20 minutes and I've already seen 4 different warnings on the net about it, and someone from school just forwarded me an e-mail message someone sent him, sure enough with the subject "ILOVEYOU"... Man, that thing is spreading fast... |
|
Back to top |
|
assa member
Member # Joined: 02 Feb 2000 Posts: 96 Location: Amsterdam Holland
|
Posted: Thu May 04, 2000 2:14 pm |
|
|
Disabling or removing windows scripting host
plus the .vbs mimetype(s) works great. Pretty
easy + fast and those .vbs 'virus' scripts
get harmless too
And turn on those DAMN extensions for your
files (i wonder why MS included the 'hide file extensions for known filetypes' option,
probably to fake a apple like look hehe).
assa |
|
Back to top |
|
B member
Member # Joined: 12 Jan 2000 Posts: 322 Location: Houston, Tx, USA
|
|
Back to top |
|
BooMSticK member
Member # Joined: 13 Jan 2000 Posts: 927 Location: Copenhagen, Denmark
|
Posted: Thu May 04, 2000 11:48 pm |
|
|
I just heard that its been hacked and goes under other names like 'Joker' and some others I don't remember right now.
I havent recieved the virus mail personally...Is it an attachment that has to be opened? or will it run automatically one the mail is opened within outlook?
,B |
|
Back to top |
|
-HoodZ- member
Member # Joined: 28 Apr 2000 Posts: 905 Location: Jersey City, NJ, USA
|
Posted: Fri May 05, 2000 3:51 am |
|
|
ya have ta admit naming it ILOVEU is pretty clever theres enuff lonely saps out their to fall for that... |
|
Back to top |
|
B member
Member # Joined: 12 Jan 2000 Posts: 322 Location: Houston, Tx, USA
|
Posted: Fri May 05, 2000 5:08 am |
|
|
,Boom you have to open the attachment. |
|
Back to top |
|
|